medium5.3
CVE-2026-107160
The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a reque…
Impact
The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.
Affected products
| Product | Affected versions |
|---|---|
| LTL Freight Quotes WordPress Plugin | before 4.2.19 |
Versions were read from the advisory text. No structured product data has been published for this record yet.